@harness-engineering/cli 4.0.1 → 4.1.0

package/dist/agents/skills/gemini-cli/pre-merge-brief/SKILL.md

@@ -0,0 +1,86 @@
+# Pre-Merge Brief
+
+> The harness pointed at the human who clicks merge. A thin wrapper over `harness pre-merge-brief` that composes a senior-facing accountability brief — the diff summary, the multi-persona review verdict (from `review-ci --json`), the curated **Signal status** snapshot, the outcome-eval result, and a derived **"👀 Worth your eyes"** section — and posts it as a single sticky PR comment (upsert by marker). All composition and degradation logic lives in the command; this skill orchestrates invocation, reports which sections degraded, and hands off. Advisory and non-blocking: the brief never flips the review gate.
+
+## When to Use
+
+- On every PR, so the senior engineer who merges sees "you are pushing this — here's what deserves your eyes" before they click merge.
+- `on_pr` (dogfooded via the `required-review` workflow, reusing that run's `review-ci --json` artifact) and `manual` (a senior running it locally against the current branch's PR).
+- NOT as a merge gate — the acknowledgment gate is deliberately deferred (spec D3). The brief is advisory; the review gate's exit code is what blocks.
+- NOT a replacement for `review-ci` — this skill CONSUMES the review verdict, it does not re-run the review (spec D1).
+- NOT for recomputing signals a different way — signals come from `@harness-engineering/signals` via the command (spec D2/D6).
+
+## Process
+
+### Phase 1: GATHER — Resolve inputs
+
+1. Locate the `review-ci --json` artifact for this run and record its path for `--from`. In CI it is the JSON the `required-review` workflow's `review-ci` step wrote (e.g. `/tmp/review.json`); locally, run `harness review-ci --json <path>` first if a verdict is wanted. Absent `--from` is tolerated — the review section degrades to "unavailable".
+2. Resolve the diff range for `--diff` (default `origin/<base>...HEAD` via the command's own resolver). Override only when the base is non-standard.
+3. Resolve the head sha for `--head` (default `git rev-parse HEAD`) — used for the `execution_outcome` graph lookup. Pre-merge the node is commonly absent, which is the documented degradation path, not an error.
+4. If posting (`--comment`), confirm `gh` is authenticated. Delivery failure never crashes the command (spec S1): it prints the brief and warns, still exiting 0.
+
+### Phase 2: COMPOSE — Run the command
+
+Invoke `harness pre-merge-brief` with the resolved inputs:
+
+```bash
+harness pre-merge-brief --from <review.json> --diff <range> --head <sha> [--comment]
+```
+
+The command builds the six-section brief (marker + header → Diff summary → Review verdict → **Signal status** → Outcome evaluation → **👀 Worth your eyes**) and, with `--comment`, upserts the sticky PR comment by its marker (`<!-- harness:pre-merge-brief -->`) — patching the existing comment in place rather than posting a new one on each push. Without `--comment` it prints the brief to stdout. Each input degrades independently to an explicit "unavailable" line; the command exits 0 on a successful render regardless of which inputs were present.
+
+### Phase 3: REPORT — Surface what matters
+
+1. Report which sections rendered with real data and which degraded to "unavailable / not yet evaluated", so the senior knows the brief's coverage.
+2. Surface the **"👀 Worth your eyes"** items verbatim — the union of blocking review findings, signals in `warn`/`alert`, and unmet outcome criteria. This is the section the accountable human should read first.
+
+### Phase 4: HANDOFF — Advisory transition
+
+Emit the transition via `emit_interaction`. The brief is advisory and non-blocking: it never flips the review gate's pass/fail status (spec D3, D4). In the dogfood workflow the brief step is `continue-on-error`, so a brief failure never fails the PR.
+
+## Harness Integration
+
+- **`harness pre-merge-brief`** — the command this skill wraps. Flags: `--from <path>` (review-ci verdict JSON), `--comment` (sticky-upsert to the current branch's PR via `gh`), `--diff <range>`, `--head <sha>`. Pure render (`buildBriefBody`) + injected seams (`postBrief`, `RunGit`, graph store); no `process.exit` in the pure core.
+- **`review-ci`** — upstream producer of the review verdict. This skill reuses its `--json` artifact via `--from`; it never re-runs the review (D1). `review-ci` remains the single source of review truth.
+- **`@harness-engineering/signals`** — the shared leaf package (extracted in spec Phase 1/D6) providing `gatherSignals`. The command computes the Signal status snapshot from it; the CLI does not route signal computation through the dashboard app.
+- **`execution_outcome` graph nodes** — the outcome-eval result, looked up by head sha from `.harness/graph`; commonly absent pre-merge (degrades to "not yet evaluated").
+- **`required-review.yml` (dogfood)** — the `on_pr` delivery path: a `continue-on-error` step runs the brief after the existing `review-ci` run, reusing its artifact (spec Phase 4/D4). Adopter template graduation is a tracked follow-up (D5).
+
+## Gates
+
+- **Never re-run the review.** Consume `review-ci --json`; do not invoke the review pipeline from this skill (D1).
+- **Never block the merge.** The brief is advisory; the review gate's exit code is authoritative. No acknowledgment gate in v1 (D3).
+- **Never crash `--comment`.** A `gh`/PR delivery failure prints the brief and warns, still exiting 0 (S1).
+- **Thin wrapper only.** No brief composition, signal computation, or union logic in the skill — all of it lives in the command.
+
+## Success Criteria
+
+Maps to spec `docs/changes/senior-accountability-surface/proposal.md`. This skill satisfies criterion #2 (the skill wrapping the command, `on_pr` + `manual`) and supports #1/#3/#4 by driving the command whose pure functions are unit-tested. Introduces no new `harness validate` findings.
+
+## Escalation
+
+- **No PR for the current branch (`--comment`).** The command warns and prints the brief to stdout instead of posting, still exiting 0. Surface the warning; do not treat it as a failure.
+- **No review artifact (`--from` missing/absent).** The review-verdict section degrades to "unavailable". If a verdict is wanted, run `harness review-ci --json <path>` first and pass it.
+- **`gh` unauthenticated or API error while posting.** Delivery fails soft (brief printed, one-line stderr warning, exit 0). Fix `gh auth` and re-run; nothing is lost.
+- **Signals or outcome-eval unavailable.** Each degrades independently to its "unavailable"/"not yet evaluated" line — expected pre-merge, not an error. Do not block the brief on them.
+- **Someone asks to make the brief block merges.** That is the deferred acknowledgment gate (spec D3), a separate future spec. Keep the brief advisory; point them at the follow-up roadmap row.
+
+## Examples
+
+### Example: brief on a PR in CI (dogfood)
+
+The `required-review.yml` workflow runs `review-ci --json /tmp/review.json`, then this skill's command:
+
+```bash
+harness pre-merge-brief --from /tmp/review.json --diff "origin/main...HEAD" --comment
+```
+
+The brief is composed and upserted as a sticky PR comment. The review found one blocking finding and two `alert` signals, so **👀 Worth your eyes** lists exactly those three; the outcome section shows "not yet evaluated" (no `execution_outcome` node pre-merge). The step is `continue-on-error`, so even if `gh` posting fails the review gate is unaffected.
+
+### Example: senior running it locally
+
+```bash
+harness pre-merge-brief --comment
+```
+
+No `--from`, so the review-verdict section renders "unavailable"; signals are gathered live and the diff summary uses the default `origin/<base>...HEAD` range. The senior sees the current signal status and diff before clicking merge.

package/dist/agents/skills/gemini-cli/pre-merge-brief/skill.yaml

@@ -0,0 +1,67 @@
+name: harness-pre-merge-brief
+version: "0.1.0"
+description: >-
+  Thin-wrapper skill that runs the `harness pre-merge-brief` command to compose
+  and post the senior-facing pre-merge accountability brief — the diff summary,
+  the multi-persona review verdict (from review-ci --json), the curated Signal
+  status snapshot, the outcome-eval result, and a derived "Worth your eyes"
+  section — as a single sticky PR comment (upsert by marker). All composition and
+  degradation logic lives in the command; the skill orchestrates invocation,
+  communicates which sections degraded to "unavailable", and hands off. Runs on
+  on_pr and manual. The harness pointed at the human who clicks merge.
+stability: draft
+cognitive_mode: constructive-architect
+triggers:
+  - on_pr
+  - manual
+platforms:
+  - claude-code
+  - gemini-cli
+  - cursor
+  - codex
+tools:
+  - Bash
+  - Read
+  - Glob
+  - Grep
+  - emit_interaction
+cli:
+  command: harness pre-merge-brief
+  args:
+    - name: from
+      description: Path to the review-ci --json CiReviewResult artifact to reuse
+      required: false
+    - name: comment
+      description: Upsert the brief as a sticky PR comment via gh (by marker)
+      required: false
+    - name: diff
+      description: "git diff range for the diff summary (e.g. origin/main...HEAD)"
+      required: false
+    - name: head
+      description: "head commit sha for the outcome-eval lookup (default: git rev-parse HEAD)"
+      required: false
+mcp:
+  tool: run_skill
+  input:
+    skill: harness-pre-merge-brief
+    path: string
+type: rigid
+tier: 2
+phases:
+  - name: gather
+    description: Locate the review-ci --json artifact, resolve the diff range, confirm gh auth for --comment
+    required: true
+  - name: compose
+    description: Run `harness pre-merge-brief` with the resolved inputs; the command builds the brief and (with --comment) upserts the sticky PR comment
+    required: true
+  - name: report
+    description: Report which sections rendered and which degraded to "unavailable"; surface the "Worth your eyes" items
+    required: true
+  - name: handoff
+    description: Emit the transition; the brief is advisory (non-blocking) and never flips the review gate
+    required: true
+state:
+  persistent: false
+depends_on:
+  - harness-code-review
+  - outcome-eval

package/dist/{agents-md-VJLYEH2S.js → agents-md-7L4PKKOM.js}

@@ -1,8 +1,8 @@
 import {
   generateAgentsMd
-} from "./chunk-T746REAE.js";
-import "./chunk-MMLQPHZ5.js";
-import "./chunk-6YFHUIGT.js";
+} from "./chunk-VG4G3R2V.js";
+import "./chunk-UACYZCW4.js";
+import "./chunk-YJYUJSWK.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-WZJR6SOI.js";
 import "./chunk-QCLOIUMX.js";

package/dist/analyzer-XRCV63KC-HLTEIKAJ.js

@@ -0,0 +1,26 @@
+import {
+  EntropyAnalyzer,
+  init_chunk_IHRT6II2,
+  init_chunk_JZ7UO3OF
+} from "./chunk-YJYUJSWK.js";
+import "./chunk-BDGTZRZ6.js";
+import "./chunk-WZJR6SOI.js";
+import {
+  init_chunk_7P6ASYW6
+} from "./chunk-XARGEOJV.js";
+import {
+  __esm
+} from "./chunk-KFQGP6VL.js";
+
+// ../core/dist/analyzer-XRCV63KC.mjs
+var init_analyzer_XRCV63KC = __esm({
+  "../core/dist/analyzer-XRCV63KC.mjs"() {
+    init_chunk_IHRT6II2();
+    init_chunk_JZ7UO3OF();
+    init_chunk_7P6ASYW6();
+  }
+});
+init_analyzer_XRCV63KC();
+export {
+  EntropyAnalyzer
+};

package/dist/{architecture-YQH2NYXY.js → architecture-RCHFDI7E.js}

@@ -1,12 +1,12 @@
 import {
   checkDependenciesDefinition,
   handleCheckDependencies
-} from "./chunk-JPVOI7GP.js";
+} from "./chunk-4SKWGVYD.js";
 import "./chunk-RC3OI5NK.js";
-import "./chunk-SEA2PFVI.js";
+import "./chunk-OZSKLJQW.js";
 import "./chunk-W6Y7ZW3Y.js";
-import "./chunk-MMLQPHZ5.js";
-import "./chunk-6YFHUIGT.js";
+import "./chunk-UACYZCW4.js";
+import "./chunk-YJYUJSWK.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-WZJR6SOI.js";
 import "./chunk-QCLOIUMX.js";

package/dist/{assess-project-KOTAPAHD.js → assess-project-YUDPNRS6.js}

@@ -1,13 +1,15 @@
 import {
   assessProjectDefinition,
   handleAssessProject,
-  parseToolResponse
-} from "./chunk-6SCYTIF4.js";
+  parseToolResponse,
+  resolveLintCommand
+} from "./chunk-RZQZXWEL.js";
 import "./chunk-RC3OI5NK.js";
 import "./chunk-W6Y7ZW3Y.js";
 import "./chunk-KFQGP6VL.js";
 export {
   assessProjectDefinition,
   handleAssessProject,
-  parseToolResponse
+  parseToolResponse,
+  resolveLintCommand
 };

package/dist/bin/harness-mcp.js

@@ -1,32 +1,32 @@
 #!/usr/bin/env node
 import {
   startServer
-} from "../chunk-RG3TNIUB.js";
-import "../chunk-OQ6KOQEV.js";
-import "../chunk-M7F2PPN3.js";
-import "../chunk-EYMOPFSD.js";
-import "../chunk-6SCYTIF4.js";
-import "../chunk-I3CGCZJF.js";
-import "../chunk-SDMV4QHM.js";
-import "../chunk-7PJCK7UE.js";
+} from "../chunk-Z4XWWNYX.js";
+import "../chunk-DGVT4DBI.js";
+import "../chunk-YXOPQEFZ.js";
+import "../chunk-ZU6T7W3U.js";
+import "../chunk-RZQZXWEL.js";
+import "../chunk-GLHLXTKC.js";
+import "../chunk-Y33P35U3.js";
+import "../chunk-RY2U77OY.js";
 import "../chunk-IOW3MW2K.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-4U5LDFCY.js";
-import "../chunk-36GQREOE.js";
-import "../chunk-JPVOI7GP.js";
+import "../chunk-AU4YPEIE.js";
+import "../chunk-4SKWGVYD.js";
 import "../chunk-RC3OI5NK.js";
-import "../chunk-SEA2PFVI.js";
+import "../chunk-OZSKLJQW.js";
 import "../chunk-W6Y7ZW3Y.js";
 import "../chunk-WBVCN35T.js";
 import "../chunk-UTJJJDNN.js";
 import "../chunk-HIK6OEUF.js";
 import "../chunk-Y6SUQC32.js";
-import "../chunk-XAVMTAUT.js";
+import "../chunk-Y5HPJMTM.js";
 import "../chunk-ZCZD7FHU.js";
 import "../chunk-EBJQ6N4M.js";
 import "../chunk-3WGJMBKH.js";
-import "../chunk-MMLQPHZ5.js";
-import "../chunk-6YFHUIGT.js";
+import "../chunk-UACYZCW4.js";
+import "../chunk-YJYUJSWK.js";
 import "../chunk-BDGTZRZ6.js";
 import "../chunk-WZJR6SOI.js";
 import "../chunk-QCLOIUMX.js";

package/dist/bin/harness.js

@@ -3,40 +3,40 @@ import {
   createProgram,
   installCommandTelemetry,
   printFirstRunWelcome
-} from "../chunk-GHBFNLV2.js";
-import "../chunk-YANR2RL7.js";
-import "../chunk-T746REAE.js";
-import "../chunk-AX5KGRM6.js";
-import "../chunk-AAUY53CC.js";
-import "../chunk-4VXFZSYF.js";
-import "../chunk-E5EW5HVJ.js";
+} from "../chunk-ABRYIEWJ.js";
+import "../chunk-N4AI2WFH.js";
+import "../chunk-VG4G3R2V.js";
+import "../chunk-P4NA5OQX.js";
+import "../chunk-YWRPQZL7.js";
+import "../chunk-GSYBGOY3.js";
+import "../chunk-XZNCONFG.js";
 import "../chunk-KET4QQZB.js";
 import "../chunk-YYFSFSB3.js";
-import "../chunk-UWVMJEUJ.js";
+import "../chunk-IGWJRAJT.js";
 import "../chunk-CQ553GZO.js";
 import "../chunk-ZP5E7YET.js";
-import "../chunk-5RSXUAMN.js";
+import "../chunk-NCMJXBEO.js";
 import "../chunk-GISMXMVL.js";
 import "../chunk-V3ZQUCRH.js";
 import "../chunk-TEFCFC4H.js";
-import "../chunk-7TIJXWG3.js";
+import "../chunk-XW5XVVMI.js";
 import {
   dispatchSkillsFromGit
-} from "../chunk-RG3TNIUB.js";
-import "../chunk-OQ6KOQEV.js";
-import "../chunk-M7F2PPN3.js";
-import "../chunk-EYMOPFSD.js";
-import "../chunk-6SCYTIF4.js";
-import "../chunk-I3CGCZJF.js";
-import "../chunk-SDMV4QHM.js";
-import "../chunk-7PJCK7UE.js";
+} from "../chunk-Z4XWWNYX.js";
+import "../chunk-DGVT4DBI.js";
+import "../chunk-YXOPQEFZ.js";
+import "../chunk-ZU6T7W3U.js";
+import "../chunk-RZQZXWEL.js";
+import "../chunk-GLHLXTKC.js";
+import "../chunk-Y33P35U3.js";
+import "../chunk-RY2U77OY.js";
 import "../chunk-IOW3MW2K.js";
 import "../chunk-3ISINLYT.js";
 import "../chunk-4U5LDFCY.js";
-import "../chunk-36GQREOE.js";
-import "../chunk-JPVOI7GP.js";
+import "../chunk-AU4YPEIE.js";
+import "../chunk-4SKWGVYD.js";
 import "../chunk-RC3OI5NK.js";
-import "../chunk-SEA2PFVI.js";
+import "../chunk-OZSKLJQW.js";
 import "../chunk-W6Y7ZW3Y.js";
 import "../chunk-WBVCN35T.js";
 import "../chunk-UTJJJDNN.js";
@@ -45,7 +45,7 @@ import "../chunk-Y6SUQC32.js";
 import {
   findConfigFile,
   loadConfig
-} from "../chunk-XAVMTAUT.js";
+} from "../chunk-Y5HPJMTM.js";
 import "../chunk-ZCZD7FHU.js";
 import "../chunk-EBJQ6N4M.js";
 import {
@@ -58,11 +58,11 @@ import {
   readCheckState,
   shouldRunCheck,
   spawnBackgroundCheck
-} from "../chunk-MMLQPHZ5.js";
+} from "../chunk-UACYZCW4.js";
 import {
   CLI_VERSION
 } from "../chunk-BM3PWGXQ.js";
-import "../chunk-6YFHUIGT.js";
+import "../chunk-YJYUJSWK.js";
 import "../chunk-BDGTZRZ6.js";
 import "../chunk-WZJR6SOI.js";
 import "../chunk-QCLOIUMX.js";

package/dist/{check-phase-gate-CHU2E3OU.js → check-phase-gate-56GS3A72.js}

@@ -1,14 +1,14 @@
 import {
   createCheckPhaseGateCommand,
   runCheckPhaseGate
-} from "./chunk-7TIJXWG3.js";
+} from "./chunk-XW5XVVMI.js";
 import "./chunk-Y6SUQC32.js";
-import "./chunk-XAVMTAUT.js";
+import "./chunk-Y5HPJMTM.js";
 import "./chunk-ZCZD7FHU.js";
 import "./chunk-EBJQ6N4M.js";
 import "./chunk-3WGJMBKH.js";
-import "./chunk-MMLQPHZ5.js";
-import "./chunk-6YFHUIGT.js";
+import "./chunk-UACYZCW4.js";
+import "./chunk-YJYUJSWK.js";
 import "./chunk-BDGTZRZ6.js";
 import "./chunk-WZJR6SOI.js";
 import "./chunk-QCLOIUMX.js";

package/dist/{chunk-JPVOI7GP.js → chunk-4SKWGVYD.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-RC3OI5NK.js";
 import {
   resolveProjectConfig
-} from "./chunk-SEA2PFVI.js";
+} from "./chunk-OZSKLJQW.js";
 import {
   sanitizePath
 } from "./chunk-W6Y7ZW3Y.js";
@@ -38,7 +38,7 @@ async function handleCheckDependencies(input) {
   const configResult = resolveProjectConfig(projectPath);
   if (!configResult.ok) return resultToMcpResponse(configResult);
   try {
-    const { validateDependencies, TypeScriptParser } = await import("./dist-6D2F2J57.js");
+    const { validateDependencies, TypeScriptParser } = await import("./dist-MCTEX5QH.js");
     const config = configResult.value;
     const rawLayers = Array.isArray(config.layers) ? config.layers : [];
     const layers = rawLayers.map((l) => ({